Privacy Policy

This Privacy Policy describes how FrenchFlavorLab collects, uses, stores, and protects the personal data of its users in connection with the use of the website and its associated services.

Its purpose is to provide you with clear and transparent information about your rights and about the measures implemented to ensure the confidentiality and security of your personal information.

FrenchFlavorLab places particular importance on respecting your privacy and is committed to ensuring that the collection and processing of personal data are carried out in full compliance with applicable regulations, including:

Regulation (EU) 2016/679 of 27 April 2016, known as the General Data Protection Regulation (GDPR); and

The French Law No. 78-17 of 6 January 1978 on Information Technology, Data Files and Civil Liberties, as amended.

Purpose of This Policy

This Privacy Policy aims to inform users of the website FrenchFlavorLab about how their personal data are collected, processed, and protected.

It seeks to ensure transparency, security, and respect for users' rights, in accordance with the provisions of Regulation (EU) 2016/679 of 27 April 2016 on the protection of personal data (General Data Protection Regulation – GDPR) and French Law No. 78-17 of 6 January 1978, known as the Data Protection and Civil Liberties Act, as amended.

Definition of Personal Data

"Personal data" means any information relating to an identified or identifiable natural person, directly or indirectly.

This includes, for example:

  • first and last name, email address, and phone number,

  • connection data (IP address, session identifiers, browser used),

  • billing or payment information,

  • and any other data that can uniquely identify a user.

Scope of Application

This policy applies to all data processing activities carried out by Pierre Rochereau-Hérin, sole proprietor operating under the trade name FrenchFlavorLab, acting as the data controller.

It covers, in particular:

  • data collected while browsing the website go.frenchflavorlab.com,

  • data provided during a purchase, registration, or interaction via a contact form,

  • and data originating from third-party services such as payment or hosting platforms.

By accessing or using this website, the user acknowledges that they have read this Privacy Policy and agree to the collection and use of their personal data as described herein.

Minors

FrenchFlavorLab products and services are intended for individuals aged 18 years or older. We do not knowingly collect personal data from minors under 18. If we become aware that we have inadvertently collected such data, we will delete it promptly.

Identity of the Data Controller

The controller responsible for the processing of personal data collected through the website FrenchFlavorLab is:

Pierre Rochereau-Hérin

Sole proprietor operating under the trade name FrenchFlavorLab

Registered with the Le Mans Trade and Companies Register (RCS) under number SIRET 989 363 031 00018

Business address: 11 rue Henri Barbusse, 72100 Le Mans, France

Contact: contact@frenchflavorlab.com

Pierre Rochereau-Hérin acts as the Data Controller within the meaning of Regulation (EU) 2016/679 (GDPR) and determines the purposes and means of the processing of personal data collected via FrenchFlavorLab.

Subprocessors and Technical Service Providers

For the proper operation of the website and the management of the services offered, FrenchFlavorLab may use external service providers acting as Data Processors within the meaning of the GDPR, particularly for:

  • website hosting and domain registration (o2switch),

  • sales funnel hosting and management (Systeme.io),

  • payment processing (Stripe, PayPal via Systeme.io),

  • transactional or marketing email delivery (Systeme.io and o2switch email services),

  • audience measurement and analytics (Google Analytics, Meta Pixel, TikTok Pixel).

These subprocessors act solely under the instructions of FrenchFlavorLab and are bound by strict confidentiality, security, and data protection obligations in compliance with applicable laws and regulations.

Data Collected

In the course of using the website FrenchFlavorLab, Pierre Rochereau-Hérin, sole proprietor operating under the trade name FrenchFlavorLab, may collect several categories of personal data.

This data is collected either directly from the user or automatically while browsing the website.

Identification Data

Collected through website forms (contact form, account creation, purchase process, etc.):

  • First and last name

  • Email address

  • Phone number (if applicable)

  • Postal address (if applicable, particularly for invoices)

This data is necessary for managing orders, creating user accounts, communicating with users, and sending information related to the services provided.

Payment Data

Collected via secure payment service providers (such as Stripe and PayPal through Systeme.io):

  • Payment-related information (card type, transaction ID, date, and amount).

FrenchFlavorLab never has access to full credit card numbers or confidential payment details.

This information is processed exclusively by the respective payment providers, in accordance with their own privacy policies.

Technical Data

Collected automatically during website navigation:

  • IP address

  • Browser type and version

  • Operating system

  • Browser language

  • Pages visited, duration of visits, and user interactions

  • Data from cookies and tracking technologies (see dedicated section)

This data helps ensure the technical functionality of the site, improve the user experience, and compile anonymized traffic statistics.

Usage and Activity Data

Collected as part of access to recipe content or the user area:

  • Purchase and transaction history

  • Access to videos and recipe materials (PDFs)

  • Login history (dates, times, and devices used)

This data is used to monitor access to content, provide customer support, and ensure the security of user accounts.

Optional Data

Users may voluntarily provide additional information via forms (e.g. comments, testimonials, customer reviews).

Such data is processed solely for the purpose of responding to the user's request or showcasing their experience (for instance, on a testimonial page, with their explicit consent).

Data from Third-Party Services

When a user interacts with social networks (Facebook, Instagram, TikTok, etc.) or third-party platforms, certain data may be collected by these platforms in accordance with their respective privacy policies.

FrenchFlavorLab has no control over such external data processing activities.

Purposes of Data Processing

The personal data collected on FrenchFlavorLab are processed for specific, explicit, and legitimate purposes, in accordance with Article 5 of Regulation (EU) 2016/679 (GDPR).

These processing activities primarily aim to ensure the management of the services provided, optimize the user experience, and guarantee the security of both transactions and the website.

Management of Orders and Access to Recipe Content

Data are used to:

  • Process orders and payments made through the website,

  • Provide access to purchased digital recipe collections (videos and PDFs),

  • Manage customer accounts, invoices, and transaction tracking,

  • Provide technical assistance or customer support when needed.

Legal basis: performance of a contract between the customer and FrenchFlavorLab (Article 6(1)(b) GDPR).

Sending of Follow-Up Emails and Educational Content

This data is used to:

  • Send information related to a purchase (confirmation, access details, follow-up),

  • Deliver recipe tips, cooking advice, updates, or invitations to new content,

  • Inform users about new products, resources, or similar offers that may be of interest.

Users may unsubscribe from promotional communications at any time using the link included in each email.

Legal basis: explicit consent (opt-in) (Article 6(1)(a)) or legitimate interest (Article 6(1)(f)) when the user is already a customer.

Response to Messages and Contact Requests

Information collected through the contact form or at contact@frenchflavorlab.com is used to:

  • Respond to questions, complaints, or requests for information,

  • Provide personalized assistance to users.

Legal basis: user consent (Article 6(1)(a) GDPR).

Audience Statistics and Website Improvement

Analytical tools (such as Google Analytics, Meta Pixel, and TikTok Pixel) may be used to:

  • Measure website traffic,

  • Analyze browsing behavior,

  • Optimize content and website design to improve the user experience,

  • Measure advertising campaign performance.

Data are anonymized wherever possible and do not allow for personal identification.

Legal basis: user consent for statistical and marketing cookies (Article 6(1)(a) GDPR).

Website Security and Fraud Prevention

Certain technical data (IP address, logs, session identifiers) are collected to:

  • Ensure the security and stability of the website,

  • Prevent fraud attempts or unauthorized access,

  • Protect user accounts and personal data.

Legal basis: legitimate interest of the data controller in ensuring the security of its services (Article 6(1)(f) GDPR) and compliance with a legal obligation (Article 6(1)(c) GDPR).

Compliance with Legal Obligations

Data may be used to:

  • Comply with accounting and tax obligations,

  • Provide information to competent authorities upon lawful request,

  • Ensure transaction traceability in accordance with French and European law.

Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

Legal Basis for Processing

In accordance with Article 6 of Regulation (EU) 2016/679 (GDPR), each data processing activity carried out on FrenchFlavorLab relies on a specific legal basis.

The main applicable legal bases are as follows:

User Consent (Article 6(1)(a) GDPR)

Certain types of data are collected and processed only after the user's explicit consent.

This applies in particular to:

  • Subscription to the newsletter,

  • Sending of promotional or educational emails,

  • Use of analytical or marketing cookies (Google Analytics, Meta Pixel, TikTok Pixel),

  • Processing of requests submitted through the contact form.

The user may withdraw their consent at any time, without justification, by following the unsubscribe instructions included in each email or by contacting: contact@frenchflavorlab.com.

Performance of a Contract (Article 6(1)(b) GDPR)

This legal basis applies when the processing of data is necessary for the performance of a contract or pre-contractual measures at the user's request.

This includes, in particular:

  • Managing orders and payments,

  • Providing access to purchased recipe collections (videos and PDFs),

  • Tracking transactions and communications related to contract execution.

Legal Obligation (Article 6(1)(c) GDPR)

Some processing activities are required by law, notably for:

  • Invoicing and accounting,

  • Retention of fiscal and accounting documents,

  • Responding to lawful requests from public authorities (administrative, judicial, or tax).

These processing operations are carried out in compliance with the legal obligations applicable to French sole proprietorships (micro-entreprises).

Legitimate Interest of the Data Controller (Article 6(1)(f) GDPR)

FrenchFlavorLab may process certain data insofar as it is necessary to protect its legitimate interests, without infringing upon the fundamental rights and freedoms of the user.

This includes:

  • Securing the website and preventing fraud,

  • Managing and maintaining technical services,

  • Continuously improving the user experience,

  • Sending relevant information to existing customers about similar products or services.

Data Recipients

The personal data collected on FrenchFlavorLab are strictly confidential.

They are accessible only to authorized individuals and service providers within the scope of their duties and for the sole purposes defined in this Privacy Policy.

Data Controller

Data are primarily processed by Pierre Rochereau-Hérin, sole trader operating under the trade name FrenchFlavorLab, acting as the data controller.

Technical Service Providers and Trusted Partners

As part of the website's operation and to ensure the proper delivery of its services, certain data may be temporarily shared with trusted technical service providers, such as:

  • The domain registrar and email hosting provider (o2switch),

  • Sales funnel hosting platform (Systeme.io),

  • Secure payment platforms (Stripe and PayPal via Systeme.io),

  • Email management or marketing automation tools (Systeme.io and o2switch email services),

  • Analytics and advertising platforms (Google Analytics, Meta Pixel, TikTok Pixel),

  • Maintenance or technical support providers acting under confidentiality agreements.

These third parties act solely on the instructions of FrenchFlavorLab and are bound by strict confidentiality obligations as well as full compliance with the GDPR.

No Transfer or Sale to Third Parties

No personal data are sold, rented, or exchanged with third parties for commercial purposes.

FrenchFlavorLab is committed to never sharing user information outside the framework strictly necessary for the provision of its services.

Legal or Regulatory Disclosure

Data may be disclosed to administrative, judicial, or tax authorities only where required by law or in response to a legal obligation, in accordance with Article 6(1)(c) of the GDPR.

Data Retention

The personal data collected on FrenchFlavorLab are retained for a limited and proportionate duration, consistent with the purposes for which they were collected, in accordance with Article 5(1)(e) of Regulation (EU) 2016/679 (GDPR) and the recommendations of the CNIL (French Data Protection Authority).

Customer Data and User Accounts

Information relating to customers (identity, contact details, purchase history, access to recipe content, email exchanges, etc.) is retained for a maximum period of 3 years from:

  • the end of the commercial relationship (last purchase, last login to the account), or

  • the last contact initiated by the customer (login, message, or click in an email).

After this period, data may be deleted or anonymized for internal statistical purposes.

Legal basis: Article 6(1)(b) GDPR – performance of a contract and management of the customer relationship.

Billing and Accounting Data

Data related to billing and financial transactions (amounts, invoices, payment identifiers, accounting records) are retained for a period of 10 years, in accordance with French legal obligations for accounting and taxation.

Legal basis: Article L123-22 of the French Commercial Code and Article 6(1)(c) GDPR – legal obligation.

Prospect and Marketing Data

Data concerning non-customer prospects (e.g., newsletter subscription, free download, contact form without purchase) are retained for a maximum of 3 years from the last interaction initiated by the user.

After this period, they are deleted or anonymized unless renewed consent is obtained.

Legal basis: Article 6(1)(a) GDPR – user consent.

Technical Data and Cookies

Technical data (IP addresses, logs, session identifiers, language preferences, etc.) and cookies placed on the user's device are retained for no longer than:

  • 13 months for audience measurement cookies,

  • 6 months for cookies strictly necessary for the website's operation.

Beyond these durations, cookies are automatically deleted or renewed with user consent.

Legal basis: Article 82 of the French Data Protection Act and CNIL recommendations of October 1, 2020.

Security and Fraud Prevention Data

Logs and security-related data (login attempts, suspicious IP addresses, server logs, etc.) may be retained for up to 12 months for the purposes of diagnosing or preventing technical or fraudulent incidents.

Legal basis: Article 6(1)(f) GDPR – legitimate interest in ensuring website security.

Data Security

FrenchFlavorLab implements appropriate technical and organizational measures to ensure the security, confidentiality, and integrity of the personal data it processes, in accordance with Articles 32 to 34 of Regulation (EU) 2016/679 (GDPR).

Hosting and Infrastructure

The website FrenchFlavorLab (go.frenchflavorlab.com) is hosted on the secure servers of Systeme.io, which provides a high level of security consistent with GDPR requirements.

The domain name frenchflavorlab.com is registered with o2switch, located in France.

Personal data are hosted on secure servers within the European Union, meeting high standards of protection and availability.

Technical service providers (hosting, payment platforms, emailing tools, etc.) are selected for their GDPR compliance and their commitments to data security.

Technical Safeguards

To prevent unauthorized access, loss, alteration, or disclosure of data, FrenchFlavorLab notably applies:

  • SSL/TLS encryption for all communications and transactions on the site;

  • use of strong passwords and restricted access policies for administrator accounts;

  • regular backups on protected servers;

  • a web application firewall (WAF) and monitoring tools to detect intrusion attempts or suspicious activity;

  • frequent updates of the platform, systems, and extensions to address known vulnerabilities.

Organizational Safeguards

Access to personal data is strictly limited to Pierre Rochereau-Hérin and, where applicable, to authorized technical processors engaged in operating the site (hosting, maintenance, invoicing, payments, etc.).

These processors act as data processors within the meaning of the GDPR and are bound by strict confidentiality obligations.

Any person with access to the data is informed of its confidential nature and subject to duties of protection and discretion.

Incident Notification

In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons (unauthorized access, loss, theft, disclosure), FrenchFlavorLab will:

  • notify the CNIL within a maximum of 72 hours after becoming aware of the breach, in accordance with Article 33 GDPR; and

  • where applicable, inform the affected users in accordance with Article 34 GDPR, where the breach is likely to result in a high risk to their rights and freedoms.

Cookies Definition

A cookie is a small text file stored on the user's device (computer, tablet, smartphone) when visiting a website.

It enables the website to remember certain information about the user's browsing activity or preferences (language, cart, session, statistics, etc.) in order to improve the online experience.

Cookies do not directly identify an individual, but may be considered personal data when they relate to an identifiable user (such as an IP address or session ID).

Purpose of Cookies Used on FrenchFlavorLab

FrenchFlavorLab uses different types of cookies to ensure the website functions properly and to improve the quality of its services:

Technical and functional cookies (essential)

Necessary for the website's operation.

Enable session management, payment security, cart retention, and display preferences.

These cookies are required for the proper functioning of the website and do not require user consent.

Audience measurement (analytics) cookies

Used to analyze website traffic (pages visited, time spent, traffic sources, device used, etc.) to improve content and performance.

Installed by tools such as Google Analytics.

These cookies are placed only with the user's explicit consent (opt-in via the banner or browser settings).

Marketing and advertising cookies

Allow measurement of advertising campaign performance and personalization of ads.

May be installed by Meta Pixel and TikTok Pixel.

The placement of these cookies is subject to the user's prior consent.

Social media and sharing cookies

Allow integration of sharing buttons or display of embedded content (widgets, videos, social feeds).

These platforms may deposit their own cookies to track user activity across other websites.

The placement of these cookies is subject to the user's prior consent.

Consent Management

When visiting FrenchFlavorLab for the first time, users are informed of the presence of cookies through an information banner.

They may then:

  • Accept,

  • Refuse, or

  • Customize the placement of non-essential cookies.

User consent is stored for a maximum period of six (6) months, in accordance with CNIL recommendations.

Once this period expires, the site will again request consent.

Browser Settings

Users may disable or delete cookies at any time through their web browser settings.

Instructions vary depending on the browser used:

  • Google Chrome: Settings → Privacy and Security → Cookies and other site data

  • Mozilla Firefox: Options → Privacy & Security → Cookies and Site Data

  • Safari: Preferences → Privacy

  • Microsoft Edge: Settings → Privacy, Search and Services

Refusing certain cookies may prevent the website from functioning properly or limit some features (video playback, cart, login, etc.).

Cookie Preferences

Users may modify or withdraw their consent at any time by contacting: contact@frenchflavorlab.com

User Rights

In accordance with Regulation (EU) 2016/679 (GDPR) and the French Data Protection Act, any user has the following rights regarding their personal data:

Right of Access (Article 15 GDPR)

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to that data.

Right to Rectification (Article 16 GDPR)

You have the right to obtain the rectification of inaccurate personal data and to have incomplete personal data completed.

Right to Erasure / "Right to be Forgotten" (Article 17 GDPR)

You have the right to obtain the erasure of your personal data in certain circumstances (withdrawal of consent, unlawful processing, legal obligation, etc.).

Right to Restriction of Processing (Article 18 GDPR)

You have the right to obtain restriction of processing in certain situations (contested accuracy, unlawful processing, etc.).

Right to Data Portability (Article 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Right to Object (Article 21 GDPR)

You have the right to object at any time to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) if you consider that the processing of your personal data constitutes a breach of the GDPR.

CNIL contact: https://www.cnil.fr

How to Exercise Your Rights

To exercise any of these rights, please send a request to:

Email: contact@frenchflavorlab.com

Postal address: Pierre Rochereau-Hérin, 11 rue Henri Barbusse, 72100 Le Mans, France

Your request must include:

  • Proof of identity (copy of ID card or passport)

  • Description of the right you wish to exercise

  • Any relevant information to process your request

FrenchFlavorLab undertakes to respond to any request within one month of receipt. This period may be extended by two months if necessary, taking into account the complexity of the request.

Processors and Transfers Outside the European Union

Use of External Service Providers

To ensure the proper operation of the website and the provision of its services (hosting, payments, emailing, statistical analysis, etc.), FrenchFlavorLab engages several trusted external providers selected for their compliance with the GDPR and European data-protection laws.

These providers act strictly within the scope of their assignments and under precise contractual instructions. They may not use personal data for any purpose other than the agreed services.

Main providers include:

  • Systeme.io (funnel management, emails, payments)

  • Stripe and PayPal (secure payment processing)

  • o2switch (domain registration and email hosting)

  • Google (analytics)

  • Meta / Facebook (advertising pixels and analytics)

  • TikTok (advertising pixels and analytics)

Data Transfers Outside the European Union

Some providers may process or store data outside the European Union, notably in the United States.

In such cases, FrenchFlavorLab ensures that transfers are carried out in accordance with Chapter V of the GDPR, i.e., under a legal framework guaranteeing an adequate level of protection.

Transfers are based in particular on:

  • Standard Contractual Clauses (SCCs) adopted by the European Commission; or

  • The EU–U.S. Data Privacy Framework (successor to the Privacy Shield), recognized by the Adequacy Decision of 10 July 2023;

  • Or any other equivalent safeguards recognized under the GDPR.

Provider Commitments

Each provider engaged by FrenchFlavorLab undertakes to:

  • Process personal data solely for the purposes of the contracted services;

  • Implement appropriate technical and organizational measures to ensure confidentiality and security;

  • Notify FrenchFlavorLab of any security incident relating to data processed on its behalf.

List of Providers

An up-to-date list of providers likely to process personal data (and their locations) is available on request at: contact@frenchflavorlab.com

Changes to the Privacy Policy

FrenchFlavorLab reserves the right to amend this Privacy Policy at any time, in order to adapt it to:

  • Legislative or regulatory developments (particularly those related to the GDPR or the French Data Protection Act);

  • Recommendations from the CNIL or other competent European authorities;

  • Or any technical or organizational changes affecting the management of personal data (for example, the addition of a new service provider or functionality).

Any modification takes effect from the date it is published on the FrenchFlavorLab website.

The date of the latest update is indicated at the bottom of this page.

Users are therefore encouraged to review this policy regularly to stay informed of any changes.

In the event of a material change affecting the nature or purpose of data processing, FrenchFlavorLab undertakes to notify affected users by email or by a visible notice on the website, in accordance with Article 13 of the GDPR.

Associated Contractual Documents

For further information regarding the use of the website, the protection of personal data, or the terms of sale, the user is invited to consult the following documents:

All of these documents are accessible at any time from the footer of the FrenchFlavorLab website.

Together, they constitute an indivisible legal framework, forming the complete contractual agreement between the user and the publisher.

By browsing, purchasing, or using the website, the user fully and unconditionally accepts these terms and conditions.

Translations

The website FrenchFlavorLab is available in several languages to facilitate understanding for international users.

However, in the event of any discrepancy or difference in interpretation between the translated versions and the French version of this Privacy Policy, the French version shall prevail.

Effective Date

This Privacy Policy shall take effect on the date of its publication on the website.

Last updated: December 6, 2025